ServiceWhat it does for RiptideData that reaches it
Fly.ioHosting and primary database · United States (primary region iad, Ashburn, Virginia)What it doesPrimary application hosting: the web app, API, connected-store webhook handlers, realtime (SSE) endpoints, and the on-stream overlay run on Fly Machines. Fly also hosts the primary Postgres database in Virginia, terminates TLS, stores application secrets and retains encrypted volume snapshots.Data that reaches itWorkspace, order, buyer delivery, queue and webhook data; request traffic, application secrets and server logs/metrics. Provider credentials are additionally encrypted by Riptide.
TigrisDatabase recovery storage · Provider-managed Global placement; not restricted to the United StatesWhat it doesStores database full backups and write-ahead logs for recovery of the Fly Postgres service.Data that reaches itRecovery copies of database records, including workspace, order, buyer delivery, queue and integration data. Access is restricted to recovery operations.
ClerkIdentity · United StatesWhat it doesSeller identity, workspaces (organizations), and role management.Data that reaches itEmail address, display name, hashed password (if used), sign-in session metadata, and organization membership.
ShopifyOrders · Shopify-operated regionsWhat it doesMerchant integration authorized by the seller at install time. Source of truth for orders and line items.Data that reaches itOrders and line items the seller has authorized Riptide to receive via OAuth scopes and webhook subscriptions.
TikTok ShopOptional native order connection · TikTok-operated regionsWhat it doesSeller-authorized shop connection, order backfill, status webhooks and queue eligibility where the native integration is available. Development-shop access does not mean public app approval.Data that reaches itAuthorized shop identifiers, order and line-item records, eligibility/status and buyer delivery details available to the integration.
Expo / Apple / GoogleOptional mobile push delivery · Provider-operated infrastructure; no US-only processing claimWhat it doesExpo relays enabled mobile notifications to the device platform push service (Apple or Google). In-app security-control alerts do not use this channel.Data that reaches itDevice push token, notification title/body, category, badge, notification identifier and app destination. Depending on the alert, content can include buyer aliases, show names and operational exception text.
DiscordDelivery · United StatesWhat it doesOutbound delivery target for queue events, stalled-queue alerts, and wrap-up summaries when the seller configures a Discord webhook.Data that reaches itEmbed payloads the seller has opted to send (queue state, buyer handles, session metadata). The webhook URL is stored encrypted by Riptide.
PostHogAnalytics · United States (PostHog US Cloud, Riptide project)What it doesOptional acquisition and seller product analytics, enabled by browser consent and a separate owner/admin workspace preference for completed operations. Autocapture is disabled. Separately consented, masked session recordings are limited to supported public marketing and top-hits pages; private workspaces are excluded.Data that reaches itAllowlisted event and normalized page names, pseudonymous seller/workspace identifiers, live/manual/sandbox/test source labels and bounded task durations/error categories. Optional masked public-page recordings and allowlisted analytics exclude customer contact details, order contents, payment details, signed URLs, tracking numbers and unrestricted form text.
